$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v6Xch-CKJ2h1BexArDzGo3ntnOg.roa File: v6Xch-CKJ2h1BexArDzGo3ntnOg.roa (raw, json) Hash identifier: 0L1fN7o3tcPseOmODtSUlGCIzxI56L0QHTOKmZgvYPA= Subject key identifier: BF:A5:DC:87:E0:8A:27:68:75:05:EC:40:AC:3C:C6:A3:79:ED:9C:E8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3986 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v6Xch-CKJ2h1BexArDzGo3ntnOg.roa Signing time: Fri 22 Aug 2025 08:46:23 +0000 ROA not before: Fri 22 Aug 2025 08:46:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14726 (0x3986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BFA5DC87E08A27687505EC40AC3CC6A379ED9CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:df:a4:49:0b:14:b2:b2:0a:0a:4b:60:10: 61:63:0f:68:f3:eb:cd:fa:b1:de:06:8f:bb:a5:0a: c5:24:87:0d:41:fb:37:ea:f5:eb:99:44:cb:86:f6: 45:cc:7c:ef:15:da:52:54:25:e5:d6:9c:5e:0c:34: 97:55:ce:9d:7a:0d:8a:7d:41:1d:7b:ea:89:5c:2f: 4e:af:f7:0f:b2:89:22:ee:eb:e7:8b:a1:03:e3:69: 44:3b:68:f1:ad:bd:00:45:95:d2:49:f8:6a:fc:9d: 63:89:0e:6b:1e:09:38:f2:16:0f:35:97:e9:7b:02: 8c:2d:aa:4a:d6:1b:30:3f:40:46:6b:60:e6:ae:55: 93:ff:68:84:3b:06:a2:3a:83:bf:c1:26:34:83:66: db:75:af:01:b0:47:2f:93:d0:0c:3e:f3:0d:fe:94: 2f:fe:04:17:9b:fc:2e:e2:3d:4b:f5:8b:74:99:ba: b8:c5:49:0e:10:7f:89:e7:eb:37:0d:36:28:e4:33: 63:12:94:70:7c:66:8f:3a:83:46:aa:d2:00:88:dc: 2c:59:f2:f0:10:d2:fa:6b:01:66:93:13:a2:0c:73: 56:37:5b:17:aa:68:ac:78:c2:29:be:2d:3d:99:d9: 6d:eb:3a:92:41:f1:3a:47:f2:39:89:94:46:de:fb: 5d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A5:DC:87:E0:8A:27:68:75:05:EC:40:AC:3C:C6:A3:79:ED:9C:E8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v6Xch-CKJ2h1BexArDzGo3ntnOg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.32.0/22 Signature Algorithm: sha256WithRSAEncryption 55:77:4c:1e:00:4a:90:f6:ff:8b:ab:8a:da:d7:70:00:58:da: ce:38:af:fc:26:d9:83:97:06:8c:89:5a:bd:fb:9e:b6:9d:fe: 11:57:5a:af:04:d9:b1:e9:a6:1c:2c:c9:fc:42:65:5b:6e:a2: b6:73:d8:06:d7:2d:40:e5:28:eb:6c:85:93:36:84:d5:90:ed: 2a:09:38:ba:3f:aa:fb:b5:a2:ad:81:c8:a0:27:28:38:69:01: 4a:06:59:ac:93:43:ef:51:c6:72:4a:d1:0e:32:e4:9f:ad:14: 60:ca:26:9e:dc:12:78:dd:d0:77:3a:82:70:a8:7f:01:ca:f8: c8:47:eb:6a:b0:16:57:1c:3f:3e:a2:41:4e:14:01:fb:21:5d: 8b:7c:5a:87:6e:ad:fa:88:28:05:d4:3f:bd:4d:84:e9:bf:fc: 6c:36:ad:e6:5d:d4:54:06:fb:39:45:e8:83:4b:7c:7e:b1:48: ac:c3:01:04:86:e6:96:82:f8:7f:d5:06:c8:9d:24:ca:3a:ca: cc:66:25:3b:a0:d5:4e:a4:ff:8b:13:8e:e4:49:5d:c9:47:70: 05:be:37:e4:d7:39:03:e3:9f:a0:75:52:11:c0:4c:7d:f3:ab: df:07:c6:53:df:97:2c:52:79:06:5e:fd:9f:c0:02:8c:86:d9: 27:6a:18:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJGQTVEQzg3RTA4QTI3 Njg3NTA1RUM0MEFDM0NDNkEzNzlFRDlDRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCrt+kSQsUsrIKCktgEGFjD2jz6836sd4Gj7ulCsUkhw1B+zfq 9euZRMuG9kXMfO8V2lJUJeXWnF4MNJdVzp16DYp9QR176olcL06v9w+yiSLu6+eL oQPjaUQ7aPGtvQBFldJJ+Gr8nWOJDmseCTjyFg81l+l7AowtqkrWGzA/QEZrYOau VZP/aIQ7BqI6g7/BJjSDZtt1rwGwRy+T0Aw+8w3+lC/+BBeb/C7iPUv1i3SZurjF SQ4Qf4nn6zcNNijkM2MSlHB8Zo86g0aq0gCI3CxZ8vAQ0vprAWaTE6IMc1Y3Wxeq aKx4wim+LT2Z2W3rOpJB8TpH8jmJlEbe+109AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUv6Xch+CKJ2h1BexArDzGo3ntnOgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Y2WGNoLUNLSjJoMUJleEFy RHpHbzNudG5PZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq ASAwDQYJKoZIhvcNAQELBQADggEBAFV3TB4ASpD2/4uritrXcABY2s44r/wm2YOX BoyJWr37nrad/hFXWq8E2bHpphwsyfxCZVtuorZz2AbXLUDlKOtshZM2hNWQ7SoJ OLo/qvu1oq2ByKAnKDhpAUoGWayTQ+9RxnJK0Q4y5J+tFGDKJp7cEnjd0Hc6gnCo fwHK+MhH62qwFlccPz6iQU4UAfshXYt8WodurfqIKAXUP71NhOm//Gw2reZd1FQG +zlF6INLfH6xSKzDAQSG5paC+H/VBsidJMo6ysxmJTug1U6k/4sTjuRJXclHcAW+ N+TXOQPjn6B1UhHATH3zq98HxlPflyxSeQZe/Z/AAoyG2SdqGOs= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:25 2025 by rpki-client